You can remove the multimedia players from their machines, but this won't
stop many, or
You can disable the port address under the internet Protocol (TCP/IP) of the
gulity machines but this will only disable the downloading of the files.
This is almost impossible for the end user to figure out.
Network Connections
Local Area Connection
Internet Protocol (TCP/IP)
Properties
Advanced Button
Options Tab
TCP/IP Filtering
Properties
Then enable the ports that are neccessary for the users to work. These can
be attaind with a port packet sniffer.
This is very effective security for keeping people out of your systems via
Trojens. Also this will allow workers access the Internet but will be unable
to download files.
the attached link has port list to help you determine which are needed
http://www.chebucto.ns.ca/~rakerman/port-table.html