How do I disable downloading from the internet from group policy?

I would like to disable users from downloading things like toolbars and other junk on their local machines.  I want to make a group policy to not allow them to download things from the internet but still grant them access to the internet.  I'd also settle for blocking file extensions from being downloaded like .exe.