windows 2003 file server file screening

my win 2003 server used for DNS, Domain Controller, and file server. I want to protect harmful file only(like .exe, .bat) from domain user to backup to file server. how, where i can configure file types to allow from user?