In my school, every student has a Gateway Tablet. Facebook is blocked during school, and regular web filtering is on anytime the students are at school. Filtering at home is managed by their parents. The students are administrators on their own tablet, and can install any software they want. This has worked well.