Before you install Password Manager, you should configure Password Manager Service account and application pool identity account on the active directory. These accounts will be used during the installation process that’s why needs to be ready before your installation.

Password Manager Service account is an account under which Password Manager Service runs, you need to ensure that Password Manager Service account has the minimum permissions required to successfully perform password management tasks in the domain.

Application pool identity is an account under which the application pool’s worker process runs. The account you specify as the application pool identity will be used to run Password Manager Web sites. Depending on your Microsoft IIS installation you might need the account to be part of the IIS_WPG local group for IIS 6 and IIS_IUSRS local group on the Web server in IIS 7.0