Restrict Internet download on LAN computers

I wanted to know if there is any policy settings for windows server 2003 to restrict the client computers from downloading anything from internet.

Or if its not possible through mere windows itself, please suggest a few third party softwares.