To stop a user from changing their password, use this command: passwd -n 2 -x 1 login_name
This sets the password lifetime to less than the number of days permitted between changes, thus preventing changes from being made.