Get a router that supports dnsmasq, you can block most of ads, although it's easy to evade, you can't really control the kids when they are able to do that.

That way you can also get rid of the hundreds of companies eager to know what you did on the internet.

I have a hosts file that consists of 15000+ lines of blocked domains, accreddited to the inability of wildcards of Windows.