Well the good news is that the OS is somewhat up to date but I would update it to the latest current stable release.
I am not a fan of using vlan01 as that can get confusing and would change the numbering to vlan10.
But before doing that I would have a good read of an excellent resource to help you learn and manage the config!
http://forum.mikrotik.com/t/using-routeros-to-vlan-your-network/126489/1
As to the question at hand, in general vlans are blocked at layer2 but could still communicate with each other at Layer3.
I see many block firewall rules to prevent this.
I would, instead, get rid of all the block rules and simply make my last rule in the forward chain a catchall block rule.
add chain=forward action=drop comment=“drop all else”
Before this last rule you would have the necessary allow rules as follows
ALLOW VLAN X to internet
ALLOW VLAN Y to internet etc… PLUS to get that elusive access!!!
add chain=forward action=accept in-interface=vlan10 source address=ADMIN PC IP destination address=SUBNET OF WIFI
comment=" Admin Access to Guest Network"