Skeptical

I am trying to get an ISO where all windows patches are installed, along with some internet services such as IIS enabled and patched. I have done this with the nlite tool, but when I connect to windows update, I still see lots of patches un-applied, even though I've applied them. Is there a reason for this? Is it due to me applying lots of patches without reboots?