Do i need Administrator priviliges to run an HTA?

I am trying to install an activex 开发者_C百科but my user has no admin priviliges. I saw an artical descirbing that HTA can install activeX as if it is an administrator. Do i need to be an administrator to run HTA? if not is this not a security loop hole?

An HTA file is an application that has the same privileges as a .EXE or a .CMD file. Many people are confused about permissions because an HTA looks like a web page. An HTA uses the same technology as web pages, but it executes locally under the same security model as any other local application.

This means, that if you run your .HTA as Administrator, it can do things that require Administrator privileges. Ordinary users can run HTAs just fine. The security model is the same as for batch files, CMD files, WSH scripts and so on.