Its says
I D Vault
Q. Is it possible to automate a new install of Notes 8.5.x (or higher) with no user interaction with the help of ID Vault.
A. Yes. If Username is set to the hierarchical username and the Domino.Name, Domino.Address, and Domino.Server entries are set appropriately, then Notes will look for the user's ID file in the ID Vault. IMPORTANT NOTE: The key is getting the Username correct for each user and then setting the ConfigFile= value in the notes.ini to point to that user's setup file. Also note that ID Vault requires version 8.5.x (or higher) for the client and server.
Username needs to be the exactly as it is in the first full name of the person doc. I guess if you have the heir name in active directory you can write a program that runs in login script that gets the info based on ldapsearch and set a new windows end lets say called usernamehier and use that in the install script. We did the keyfilename as our %username% concatenated with .id matched the filename and this was also pre setting up the id vault.