By default.
This is a security restriction, like UAC. And so you can turn it off, just like you can turn off UAC.