Is there any way using GPMC to disable all downloading?

I created and OU and put all the users who I don’t want downloading inside. However in GPMC there is no policy setting for disabling downloading. I know I can go to each PC and disable it in the IE security settings and then disable access to the security tab via GPMC. Is the the only way I can do this?

Thanks