Stop users from downloading in domain

We have Windows 2003 Server as a domain & all workstations are windows XP. I want to stop the users from downloading any executable files.How I can do that? Is it posible in Active Directory Group Policy? Please help.