I get the list of domain groups for a domain user by opening a cmd window and executing:
net user /domain theirname
Also, I generally create a Startup database and assign all logins to that as a default. It prevents people from creating junk objects in master. It is also easy to check logins work without checking the status of all databases the login may use. This technique also forces applications to be responsible for setting a database after connecting and "knowing" which database they are currently working against.