If you only stop the service, but leave it to automatic, you'll get the alert. A disabled service would no longer be monitored.
In the service monitors description you'll see:
"The monitor checks the state of the Exchange Windows Service to ensure that it is in a "running" state (only services with start type set to “Automatic” are considered). If that is not the case over multiple checks, then an alert is raised."
B. Wright