Thanks, kanewolf. Since our work computers are on the same home network as our kid's devices, what approach would you recommend to uniquely identify the kid's devices -- and disallow a VPN connection? Or, would this be some kind of agent running on the devices themselves?