http://technet.microsoft.com/nl-nl/library/dd379509(v=ws.10).aspx

Displaying the Deleted Objects container

When Active Directory objects are deleted, they are placed in the Deleted Objects container. By default, the CN=Deleted Objects container is not displayed. You can use the Ldp.exe administration tool in Active Directory Domain Services (AD DS) to display the Deleted Objects container.

Membership in Domain Admins, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at http://go.microsoft.com/fwlink/?LinkId=83477.

To display the Deleted Objects container

1.      To open Ldp.exe, click Start, click Run, and then type ldp.exe.

2.      On the Options menu, click Controls.

3.      In the Controls dialog box, expand the Load Predefined pull-down menu, click Return deleted objects, and then click OK.

4.      To verify that the Deleted Objects container is displayed:

1. To connect and bind to the server that hosts the forest root domain of your AD DS environment, under Connections, click Connect, and then Bind.
2. Click View, click Tree, and in BaseDN, type DC=<mydomain>,DC=<com>, where <mydomain> and <com> represent the appropriate forest root domain name of your AD DS environment.
3. In the console tree, double-click the root distinguished name (also known as DN) and locate the CN=Deleted Objects, DC=<mydomain>,DC=<com> container, where <mydomain> and <com> represent the appropriate forest root domain name of your AD DS environment.

Restoring a deleted Active Directory object using Ldp.exe

You can use Ldp.exe to restore a single, deleted Active Directory object.

Membership in Domain Admins, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at http://go.microsoft.com/fwlink/?LinkId=83477.

To restore a deleted Active Directory object using Ldp.exe

1.      To open Ldp.exe, click Start, click Run, and then type ldp.exe.

2.      To connect and bind to the server that hosts the forest root domain of your AD DS environment, under Connections, click Connect, and then click Bind.

3.      In the console tree, navigate to the CN=Deleted Objects container.

4.      Locate and right-click the deleted Active Directory object that you want to restore, and then click Modify.

5.      In the Modify dialog box:

1. In Edit Entry Attribute, type isDeleted.
2. Leave the Values box empty.
3. Under Operation, click Delete, and then click Enter.
4. In Edit Entry Attribute, type distinguishedName.
5. In Values, type the original distinguished name (also known as DN) of this Active Directory object.
6. Under Operation, click Replace.
7. Make sure that the Extended check box is selected, click Enter, and then click Run.