Allocating DNS Server based in Rules

I’m trying to set my childrens’ devices to be able to access only the safe internet (or as safe as possible). One option I have for doing this is to send traffic from their devices to a different DNS server (say the BT child-safest one) than other devices.

Firstly, is this the best way of doing this?
Secondly, can I use Windows login information to achieve this from Windows laptops?
Thirdly, is the best way to force the DNS server of my choices on their devices and avoid the router completely?

PS. They’re not yet old enough to figure out clever ways around IP lookups.

Darren.

Crate a separate part (pool) of the network for the kids. Then you can use DHCPserver-networks to define their servers where they go to.

You van use MAC address by example to put the computer in that part of the address range.