So i moved our domain up to 2008 R2 domain and forest functional level – all so i could have the excitment of enabling AD recycle bin.
http://technet.microsoft.com/en-us/library/dd392261(WS.10).aspx
Enabling AD recycle bin – powershell or LDP… not the friendliest, but fair enough…
But actually recovering the objects, LDP or powershell aswell… thats just not very user friendly! not when you want to be giving that type of task to helpdesk level staff.
*sigh* another feature of 2008 R2 which is a good idea but, in its current iteration, useless (just like Direct Access and its complete lack of meaningful logging)