User interaction during maintenance window

Hi All,

Can the user login/access the machine during a maintenance window and if yes how do i prevent them from logging in at that time? Can this be done from SCCM itself? Also, by user logging in, can the update result in a failure? Thank you.