Is it possible to use the Group Policy to block specific file types from being downloaded? For example, .js, .ps, .vba, .bat, etc. It would be useful as one measure to block dangerous files.