WK8R2 server filetype restriction on network shares

hello

I ve read that one can restrict users from writing undesired files like *.exe *.mp3 to network shares.
Is it possible to do this on GPO level or share level.
The idea is to restrict users based on their group membership or based on network share profile

Clients W7 Pro / Server WK8R2  Std edition as PDC and file server

Thanks