I've barely used Windows but I understand that things are signed so when a user installs a package it's signed and they need to be an administrator to install it.