So I left the domain, rebooted, reconnected to the domain.
I replace the default sssd.conf with my version.
restarted sssd and the student account I modified is working.
I am going to test a few, but it looks like it was the default upn.
thanks very much for your help