When using the Google Apps Directory Sync tool, make sure you TEST the configuration file before you save and run it!
I have just managed to delete a user from my Google Apps domain (including all of her email, contacts etc.) after excluding her account from synchronisation. What I didn't realise was that I had set the Sync tool to delete any accounts not found in LDAP or that are excluded, so on first sync, bang, off it went.
Unbelievably there seems to be no way to recover things yet, but I'll wait for Google to get back to me on that one.....
