INTERNET SERVER ACCESS

A buddy of mine set up an NT Web Server. In order for anyone to access it from the web he have to give them Domain Admin Access. I dont think that this should be. Thats too much priviledge. What’s are we missing?