Beyond patching, how can I reduce the risk of browser exploits?

Keeping web browsers on the most up to date version and also the plugins that are used is pretty much all we do.

Is there anything I else I can do to reduce the risk of browser exploits? The only thing I can think of that would help is least priviledge user accounts but that's quite a general good practice.