After gaining an initial foothold on a Windows workstation as a standard domain user during an internal engagement, you want to determine whether the compromised account already has administrative rights on the local machine before attempting any privilege escalation exploits. Which command provides this information most directly?