how to find what container a user is in active directory