This question already has an answer here:
I want to prevent a user from changing their own password. Additionally, if possible, I want to prevent them from changing it via sudo.
Change the password minimum age:
If the user is clever enough and he has sudo priviledges, you'll have a hard time trying to stop him. If you remove
I think all you could do is to give a group (or a user) the rights to run specifics commands. If you allow them to run arbitrary commands and you try to deny them running specific commands like
To avoid a user from running the passwd command, just make it non-executable for everyone but root.
Don't forget, there are more ways to change a password other than with Terminal!
Also visit https://help.ubuntu.com/community/BasicChroot to see if this helps
You could install
but be carefully with configurating it.
When you configurate it wrong, then you are one level deeper and may not work as admin any more resp. you might then be not allowed any more to use terminal/shell/konsole as before !