Please Note that the suggestion offered here is a change to the core code, and would be overwritten during a portal upgrade.

You can go into the markup of the control and either set the Visible property to False, or the Enabled property to False.

I believe that the file you would want to modify is the ~/admin/Users/manageusers.ascx file.  This would be the easiest way.  Disabling or hiding this control will not allow the end-users to be able to even see the "Manage Password" control. 

Just go into that file and perform the previously mentioned task(s) to the cmdPassword control.  Here is an example:

<dnn:commandbutton id="cmdPassword" runat="server" 
    resourcekey="cmdPassword" imageurl="~/images/save.gif" 
    causesvalidation="False" Visible="False" Enabled="False" />

Setting the Visible property to False will prevent the control from being rendered to the end-user.  Alternatively, setting the Enabled property to False will show the password link, but clicking it will do nothing.  In my experience, the Visible property is the better option from a usability perspective.

---

Will Strohl

Upendo Ventures DNN experts since 2003 Official provider of the Hotcakes Commerce Cloud and SLA support

Another way to prevent the users from changing the passwords is to simply remove the UserProfile page. In the Site Settings dialog you can redirect the users profile request that occurs when they click on their name next to the logout button to a different page than the standard User's Profile maintenance control.

If you still want the user to be able to edit their profile, then you would need a custom User's Profile control. We have done this for several sites we maintain. If you would like the code, just email me.