Can you still patch a machine with ZPA, but the users account is disable (ZPA Unauthenticated)

Hi,

If a user’s account is disabled will the machine continue to be patched over ZPA when in a Unauthenticated state? If yes, what happens if a patch requires a reboot? Will ZPA be running while at the windows login screen?

Ryan