Security Audit Log Activation and Capabilities

Dear All:

There is a request to activate the security log for our SAP systems specially the finance one. How can I activate it to achieve the followings:

1-Audit the employees how access the screens, tables, data...etc

2-Audit all changes by all users to the data

3-Keep the data up to one month

4-Log retention period can be defined.

I checked the sm19/sm20 but the options are:

1-Dialog logon

2-RFC login/call

3-Transaction/report start

4-User master change

5-System/Other events

Can I use these options to achieve the requested requirements? What are other transactions that I can use to do that?

Our systems are on Windows 2003 with SQL2005.

Regards,

Ahmad Yasin