Without writing code, you could disable password reset in the membership section of the web.config, this would disable password resets for all accounts though.
enablePasswordReset="false"
Code would have to be written to do anything beyond that to specifically disallow password changes of one account.