Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
Determines which users can attach a debugger to any process. This privilege provides powerful access to sensitive and critical operating system components.
This user right is defined in the Default Domain Controller Group Policy object (GPO) and in the local security policy of workstations and servers.
By default, only administrators and LocalSystem accounts have the privileges to debug programs.