Pretty sure you can set that up somewhere in Local Security Policy (start > run > secpol.msc) or local group policy (gpedit.msc), but I'd have to look. Which means... you do it, I'm lazy 
If you don't run as administrator it always prompts for password
