If you have a Raspberry Pi sitting around (or can get one), you might look at Pi-hole:
pi-hole.net
It's a network-wide ad-blocker, that works by funneling every request for an actual address through it (translate google.com into 142.251.116.113, for example), and it only returns a real address for what is not an ad.
Set up the Pi, and then set your DNS server to point to the Pi. You can do that separately for each computer, or you can set your router to give the Pi's address to everyone that asks for a DNS server. (default is usually the router itself)