Machines using the SQL Authentication
As you identified in your question, it is not possible to reliably discern which Windows user is logged into a SQL Server using a SQL Server login.  You could track the name of the workstation where the user connects from, but that doesn't guarantee anything - the workstation name is easily spoofed.

If you require that level of auditing, you'd need to build it into all applications accessing the database.