GPO Deny Finder is a FREE tool from sdmsoftware that helps you to find GPOs that have deny ACEs. The below video explains how to use the tool.
More details about the tool can be found here or just download the tool directly from here
by Alex Verboon