>Is there anyway to record in a table when a connection is created and dropped and the workstation that did it?
>
>Kirk

You can run a Profiler trace, which will store to a table. Traces can hinder performance if run for too long, but if you limit it to just those 2 events, it probably won't hurt too bad.

Under Profiler select:

Events
  Security Audit - Audit Login, Audit Logout
  Sessions - ExistingConnection [so you know when one of these is logged out]
Data Columns - [at minimum]
  EventClass, HostName, StartTime, SPID