AdGuard Home is a useful option for network owners wanting self-managed DNS filtering. Configure the service with a trusted upstream resolver and test it with one client before updating router settings. Start with a small, representative task so you can check the results before extending the setup.
Create exceptions only after inspecting query logs, and document how to restore DNS access during maintenance. Consider the practical trade-off: dNS filtering has domain-level limits.