I can't really explain it, but my general handling was to always install via Microsoft Update. I figure it's got at least some sense in the order that things should be installed in. SP2 is likely a newer rollup of all the previous .Net 2.0 security patches, and would have to be installed after 2.0.