Stop media player, real player,radio!

W2k network w/ AD. Can I use group policy to stop the above? or is it better to disable the ports on our firewall and if so, what are the ports to close?
I need to give only email, web, ICQ for some. Nothing else. I need to restrict resource hogs on our slow network

Thanks