stop users from downloading programs

Does anybody have a way to stop users from downloading software and programs from the internet when they are logged in to the PC running NT4.0 localy, and when they need to download something they can ask me.
I’m the sys. adm.