When trying to add a Managed Domain, the error "user account must have the replication changes permissions..." and the domain cannot be added.
There could be a few causes:
1) DNS and name resolution.
2) Firewall between the ARS server and the domain being added.
3) Permissions to the domain being added.