Password source when using PCNS?

Hi,

So there are a number of built-in MAs that work with PCNS (i cant find the technet link for this, but I think there is one).

From what I recall Password Sync was uni-directional, is that still the case in FIM R2?

Since PCNS is installed on domain controllers, can we safely assume that the originator of any password change can always and only be Active Directory? i.e. we can never have AD LDS, for example, as the source for a password sync?

thanks,

dw