Authentication, authorization, and accounting (AAA) schemes and HWTACACS or RADIUS server templates on AR routers indeed take effect only after being applied to a domain. This is because a domain defines the scope within which these policies and configurations are valid. Without applying them to a domain, the settings would not be linked to any user group or administrative area, rendering them inactive.