...
This document gives you a working example of how to use Secondary File filters.
MSI File Example
If you want to elevate .msi files that are in a network share, you cannot use a commandline filter because the following syntax does not work:
...
If you tried to use a command line filter, then you would have to specify each .msi file explicitly and then create several individual elevation policies–an policies–-an extremely tedious task. Or you could create a commandline like \\SERVER\Share\, but this would elevate anything in the share folder. To target and elevate only .msi files efficiently, the solution is to use the Secondary File Filter.
...