does your router support any filtering like this? that's probably the easiest way if you already have the capabilities.
if you have a server between the router and pc's, then it can also be used to filter with a simple host file change. that's how i have it in my house. this way no matter what/who connects to the network, the filter stays in place. once they leave my network though i have no control over what the devices do.
keep in mind though that vpn's, proxy's and so on can and will be used to get around any local filtering. so you'll have to stay on top of things to keep an eye on when they start using them on your network to block them as well.
i'd have to look into it again but at one point a school i taught at had...