p.s. I'm using LDAP enrollments if that helps.
Congratulations, we noticed something like that, too. It seems that all roles except administrator in main site category need the "guest" category to work.
If this helps you: Creating a new "guest" role doesn't help. Defining the roles again is neither a solution.
We use LDAP, too.