# add user to the group
PV > Add-DomainGroupMember -Identity <group> -Members <user>
# confirm group membership
PV > Get-DomainGroupMember -Identity <group>
Check object's ACL.
# check rights of oorend over winrm_svc
Get-DomainObjectAcl -Identity winrm_svc -Where "SecurityIdentifier contains oorend"