From the MS catalogue, a downloaded .NET Security Only patch can be either an MSU or EXE file.
If it is an EXE file does one have to stop the Windows Update process to do the installation the same way WU pocess has to be stopped to install the MSU file?