Have you looked into Parental Controls for those accounts? You can specify which applications are available and filter websites by allow list. It is certainly not an AD group policy management schema, however, if you are imaging the Macs you can include the user account in the image and deploy it to all Macs that would be available to your juveniles.