Well first off, the you've obviously burned the DVD-ROM from an downloaded ISO. So is it legal?
Next thing, Windows Update will just work by searching for updates, so if you just want to download security-only patches after October 2016, I would use either WSUS or the Microsoft Update Catalog. Then you can run Windows Update again afterwards and install the other .NET and IE 11 updates.