How do I stop students using social media on school tablets during class?
Leave social apps off the group's app list and add a school-hours window that allows only learning apps. Because Skie uses allow lists, a social app that is not named is hidden, and one installed later is removed. Alternative browsers and VPN apps are always blocked, so there is no easy way round.
Start with the list rather than a block list. If Instagram, Snapchat or a chat app is not on the group's app list, it is hidden. If a student installs it from somewhere else, unknown sources are blocked, and the install guard removes anything installed after enrolment that is not allowed.
Then use time. A school-hours window gives lessons only the apps you name. Outside class you can allow more, or keep the same list all day, as your policy requires. Windows switch on their own, so there is no manual lock to forget.
The web is the other door. In Chrome, SafeSearch is forced, the safe-sites filter is on and incognito is blocked. The filtering DNS is locked on the device, so it travels onto any Wi-Fi or mobile data. More than fifty alternative browsers, VPN, proxy and DNS changer apps are always blocked. Custom per-website allow and block lists are not available yet, so rely on the filter's categories.
Some students will still use a personal phone. Skie covers the managed device, not a phone you do not manage. A practical tip: pair the technical rule with a written device policy that parents and students sign, and keep the Play Store hidden so the list is the only authority. See the school device policy template for wording.